Skip to main content

Posts

Showing posts from October, 2017

Windows 10 Warning: 250M Account Trojan Can Disable Windows Defender

Trickbot is not a new threat, but it is an evolving one. The latest twist of the banking Trojan knife as far as Windows 10 users are concerned is the addition of new methods to not only evade but actually disable Windows Defender security protection. As  reported  on July 14 in  Forbes , Trickbot is a particularly stealthy banking Trojan that has been around since 2016. Since then, it was thought to have compromised no less than 250 million email accounts in an effort to distribute the malware payload. That payload includes the stealing of online banking credentials and cryptocurrency wallets. Microsoft has always been front and center as far as Trickbot attack campaigns are concerned, with weaponized Word and Excel files being a favored approach. The  latest campaign  is targeting Windows 10 users and implementing a highly detailed and convincing, but fake nonetheless, Office 365 page to prompt for browser updates that install the Trojan itself. Disab...

A Little Story About the `yes` Unix Command

What's the simplest Unix command you know? There's  echo , which prints a string to stdout and  true , which always terminates with an exit code of 0. Among the rows of simple Unix commands, there's also  yes . If you run it without arguments, you get an infinite stream of y's, separated by a newline: y y y y (...you get the idea) What seems to be pointless in the beginning turns out to be pretty helpful : yes | sh boring_installation.sh Ever installed a program, which required you to type "y" and hit enter to keep going?  yes  to the rescue! It will carefully fulfill this duty, so you can keep watching  Pootie Tang . Writing yes Here's a basic version in... uhm... BASIC. 10 PRINT "y" 20 GOTO 10 And here's the same thing in Python: while True : print ( " y " ) Simple, eh? Not so quick! Turns out, that program is quite slow. python yes.py | pv -r > /dev/null [4.17MiB/s] Compare that with the built-in v...

10 Linux Commands Every Developer Should Know

My setup. Happy Hacking Linux installed in a Macbook Air 2013. As a software engineer, learning Linux was the best time investment I've made. Since it user needs to understand and maintain, daily experience feels like adding a drop to the puddle. After long time, the puddle becomes a lake, or even an ocean. Today as a 30 years old engineer, I still benefit from little chunks of knowledge that I happened to learn years ago, when I was an ambitious beginner. In  another blog post , I explain more about why Linux is more pragmatic option for software developers. In this blog post I'll share  less popular but very useful Linux commands  I personally use and recommend. If you're on a Macbook, that's fine, because most of the commands I'll mention also exist in OSX. 10. file Returns information for given file. For example, you can print the size information of an image: file logo.png Returns: > PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced...

Video Cards AMD's next-gen Navi GPU launching in August 2018

AMD has had an amazing couple of years, and an even better 2017 with the mega success of Ryzen and Ryzen Threadripper knocking Intel down from its uber-throne. But what about the GPU division? AMD launched their next-gen Vega GPU architecture, the first consumer graphics cards to feature HBM2 technology. It was back in May this year where I  exclusively revealed there would be less than 16,000 Vega graphics cards  available in the months post-launch... and here we are, with shortages and only a single custom RX Vega graphics card in the wild. But what about Navi? Once again I have an exclusive story that AMD will have Navi ready to go sometime in July-August 2018, with a Navi-based professional card being launched at SIGGRAPH 2018. We're still waiting for AMD to launch Radeon Pro SSG, something they unveiled during SIGGRAPH 2017 that hasn't yet materialized. In the meantime, Radeon Technologies Group boss  Raja Koduri has taken a sabbatical  from the company un...

Immerse yourself in Coding 101 instruction, and pay what you want

Learning to code sounds like a fairly straight line idea. You learn about coding, then you know how right? Well, it isn’t always that easy, because there are just so darn many ways to code a web page or app. There are literally a dozen different ways you could piece your idea together, and you’ll learn all of ‘em with this  Learn to Code 2017 bundle of courses . Best of all, you can get the entire package for  any price you want to pay , thanks to TNW Deals. Your education begins once you’ve paid any price at all. That investment will get you the introductory course JavaScript Programming Complete, a complete walkthrough of JavaScript, one of the most commonly used programming languages in all of the web development. But as we’ve already discussed, there is a myriad of ways to create online. Therefore, once you’ve matched the average payment offered by other students like yourself, you’ll immediately get access to nine more courses, unlocking a treasure trove of pr...

SmartBillions Challenges Hackers with 1,500 Ether Reward, Gets Hacked and Pulls Most of It Out

SmartBillions, a so-called fully decentralized and transparent lottery system, managed by an Ethereum smart contract, recently challenged hackers to get through its smart contract’s security, and added a 1,500  Ether  ($450,000) reward to be collected by anyone that managed to compromise it. The goal was to demonstrate “the SmartBillions lottery smart contract’s comprehensive security.” Initially, according to a  press release , the prize was to be collected by any hacker that managed to break into the smart contract and withdraw the funds, as a way to prove how serious the team took investor protection. The team stated: “The development team is so confident in their product and its security that they will risk their own funds (1500 ETH), to demonstrate its safety.” A few days later, the issued challenge seemingly backfired, as a hacker did manage to compromise the smart contract. The hacker, according to a  Reddit thread , essentially managed to game th...